This project is pre-1.0. The latest main branch is the supported target.

• Do not open public issues for undisclosed vulnerabilities.
• Report details privately to the maintainers.
• Include:
  • affected component (gateway or runner)
  • reproduction steps
  • impact assessment
  • suggested fix if available

Maintainers will acknowledge reports and coordinate a fix and disclosure timeline.